AMD AMD Ryzen™ 9000 Series Desktop Processors (formerly codenamed "Granite Ridge") vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting AMD AMD Ryzen™ 9000 Series Desktop Processors (formerly codenamed "Granite Ridge"): 5 record(s), with affected versions and fixes.
CVE-2026-0438
Medium · 5.4
CWE-1072 May 14, 2026
A System Management Mode (SMM) handler could perform a callout to code located in non-SMM...
A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. A highly privileged attacker could, with active user interaction and under high complexity and present preconditions, trigger execution of attacker-controlled code in SMM, potentially compromising the system’s confidentiality, integrity, and availability.
CVE-2025-48521
Medium · 6.9
CWE-416 May 14, 2026
Use After Free in AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Renoir")
Improper input validation in the AMD Secure Processor (ASP) PCI driver could allow a local attacker to trigger a Use-After-Free (UAF) condition, potentially resulting in a loss of platform integrity or crash.
CVE-2025-48512
High · 7.0
CWE-276 May 14, 2026
Incorrect Default Permissions in AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Renoir")
Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO) could allow an attacker to achieve privilege escalation resulting in arbitrary code execution.
CVE-2025-54502
High · 7.5
CWE-668 Apr 16, 2026
Exposure of Resource to Wrong Sphere in AMD AMD EPYC™ 9004 Series Processors
Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access (Ring 0) to achieve privilege escalation potentially resulting in arbitrary code execution.
CVE-2025-48503
High · 7.8
CWE-427 Feb 11, 2026
Uncontrolled Search Path Element in AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Renoir")
A DLL hijacking vulnerability in the AMD Software Installer could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.